verizon[.]jkhf[.]cc

verizon.jkhf.cc was observed as a brand‑impersonation infrastructure targeting the x.com brand. The domain was registered on 21 February 2026 through Gname.com Pte. Ltd. and is delegated to the Cloudflare name servers collins.ns.cloudflare.com and dane.ns.cloudflare.com. DNS resolution points to 172.67.136.201, an address owned by AS13335 Cloudflare, Inc. located in the United States. No TLS certificate was presented when the site was accessed, and the HTTP response returned the default “Welcome to nginx!” title, indicating that the server is delivering a generic web server page rather than a phishing login portal.

The domain has been listed on a single security blocklist and is actively blocked by the PhishDestroy feed. Reputation scoring from Gridinsoft assigns a trust score of 0 / 100. VirusTotal analysis shows that 13 of 93 scanning engines flagged the domain as malicious, reinforcing the suspicion of abuse.

The site is currently taken offline, and the unique seed 3b6796 marks this observation in internal tracking. Defenders should add verizon.jkhf.cc to network‑level deny lists, enforce DNS filtering for the associated IP range, and monitor Cloudflare‑hosted assets for similar newly registered domains. Continuous re‑evaluation is advised, as the lack of an SSL certificate and the generic page title limit the ability to confirm the exact phishing payload, but the combination of registrar information, hosting context, and multi‑vendor detection indicates a high confidence of brand‑impersonation activity.